[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fo7kUzuxH0NcyVTdfC5gqUSEWW-EqDsU7q1Lj6B6yNxU":3,"g5a-family:suse\u002Flinux_enterprise_software_development_kit":187,"g5a-ex:suse\u002Flinux_enterprise_software_development_kit@*":188},{"success":4,"data":5},true,{"product":6,"versions":33,"topVulnerabilitiesByEpss":39,"kevVulnerabilities":101,"seoMetadata":165,"meta":184},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":32},"suse","linux_enterprise_software_development_kit",5,302,11,"2022-09-29",[14,18,21,26,30],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},"10",94,2,{"version":19,"cve_count":20,"kev_count":11,"has_kev":4},"11",189,{"version":22,"cve_count":23,"kev_count":24,"has_kev":25},"11.0",3,0,false,{"version":27,"cve_count":28,"kev_count":29,"has_kev":4},"12",121,7,{"version":31,"cve_count":23,"kev_count":24,"has_kev":25},"12.0","Linux Enterprise Software Development Kit by Suse is a technology product with 5 tracked versions and 302 known security vulnerabilities including 11 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[34,35,36,37,38],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},{"version":19,"cve_count":20,"kev_count":11,"has_kev":4},{"version":22,"cve_count":23,"kev_count":24,"has_kev":25},{"version":27,"cve_count":28,"kev_count":29,"has_kev":4},{"version":31,"cve_count":23,"kev_count":24,"has_kev":25},[40,48,53,58,66,74,79,84,90,95],{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":4,"epssScore":47},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":4,"epssScore":52},"CVE-2012-1823","sapi\u002Fcgi\u002Fcgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.","2012-05-11",0.99998,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":4,"epssScore":57},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":63,"severity":64,"isKev":25,"epssScore":65},"CVE-2015-4000","The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.","2015-05-21",3.7,"v3.0","Low",0.9986,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":71,"severity":72,"isKev":25,"epssScore":73},"CVE-2011-3192","The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.","2011-08-29",7.8,"v2","High",0.98828,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":4,"epssScore":78},"CVE-2013-2465","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image channel verification\" in 2D.","2013-06-18",0.98802,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":4,"epssScore":83},"CVE-2012-0507","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency.  NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions.  NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.","2012-06-07",0.98189,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":71,"severity":46,"isKev":25,"epssScore":89},"CVE-2011-4862","Buffer overflow in libtelnet\u002Fencrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.","2011-12-25",10,0.95061,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":4,"epssScore":94},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.","2016-04-21",0.92334,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":63,"severity":72,"isKev":25,"epssScore":100},"CVE-2015-7547","Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing \"dual A\u002FAAAA DNS queries\" and the libnss_dns.so.2 NSS module.","2016-02-18",8.1,0.90987,[102,107,116,120,127,131,135,144,148,150,159],{"cveId":91,"description":92,"publishedDate":93,"cvssScore":44,"severity":46,"isKev":4,"epssScore":94,"cisaVulnName":103,"cisaDateAdded":104,"cisaShortDescription":105,"cisaRequiredAction":106},"Oracle Java SE and JRockit Unspecified Vulnerability","2023-05-12","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.","Apply updates per vendor instructions.",{"cveId":108,"description":109,"publishedDate":110,"cvssScore":111,"severity":72,"isKev":4,"epssScore":112,"cisaVulnName":113,"cisaDateAdded":114,"cisaShortDescription":115,"cisaRequiredAction":106},"CVE-2015-4495","The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.","2015-08-08",8.8,0.68558,"Mozilla Firefox Security Feature Bypass Vulnerability","2022-05-25","Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.",{"cveId":75,"description":76,"publishedDate":77,"cvssScore":44,"severity":46,"isKev":4,"epssScore":78,"cisaVulnName":117,"cisaDateAdded":118,"cisaShortDescription":119,"cisaRequiredAction":106},"Oracle Java SE Unspecified Vulnerability","2022-03-28","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to 2D",{"cveId":121,"description":122,"publishedDate":123,"cvssScore":111,"severity":72,"isKev":4,"epssScore":124,"cisaVulnName":125,"cisaDateAdded":118,"cisaShortDescription":126,"cisaRequiredAction":106},"CVE-2013-1690","Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.","2013-06-26",0.69021,"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.",{"cveId":49,"description":50,"publishedDate":51,"cvssScore":44,"severity":46,"isKev":4,"epssScore":52,"cisaVulnName":128,"cisaDateAdded":129,"cisaShortDescription":130,"cisaRequiredAction":106},"PHP-CGI Query String Parameter Vulnerability","2022-03-25","sapi\u002Fcgi\u002Fcgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.",{"cveId":80,"description":81,"publishedDate":82,"cvssScore":44,"severity":46,"isKev":4,"epssScore":83,"cisaVulnName":132,"cisaDateAdded":133,"cisaShortDescription":134,"cisaRequiredAction":106},"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","2022-03-03","An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.",{"cveId":136,"description":137,"publishedDate":138,"cvssScore":139,"severity":140,"isKev":4,"epssScore":141,"cisaVulnName":142,"cisaDateAdded":133,"cisaShortDescription":143,"cisaRequiredAction":106},"CVE-2015-4902","Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.","2015-10-22",5.3,"Medium",0.13603,"Oracle Java SE Integrity Check Vulnerability","Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.",{"cveId":54,"description":55,"publishedDate":56,"cvssScore":44,"severity":46,"isKev":4,"epssScore":57,"cisaVulnName":145,"cisaDateAdded":146,"cisaShortDescription":147,"cisaRequiredAction":106},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"severity":46,"isKev":4,"epssScore":47,"cisaVulnName":145,"cisaDateAdded":146,"cisaShortDescription":149,"cisaRequiredAction":106},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.",{"cveId":151,"description":152,"publishedDate":153,"cvssScore":154,"severity":140,"isKev":4,"epssScore":155,"cisaVulnName":156,"cisaDateAdded":157,"cisaShortDescription":158,"cisaRequiredAction":106},"CVE-2016-3715","The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.","2016-05-05",5.5,0.75307,"ImageMagick Arbitrary File Deletion Vulnerability","2021-11-03","ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.",{"cveId":160,"description":161,"publishedDate":153,"cvssScore":154,"severity":140,"isKev":4,"epssScore":162,"cisaVulnName":163,"cisaDateAdded":157,"cisaShortDescription":164,"cisaRequiredAction":106},"CVE-2016-3718","The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.",0.7565,"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.",{"title":166,"metaDescription":167,"keywords":168,"structuredData":169},"Linux Enterprise Software Development Kit by Suse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Linux Enterprise Software Development Kit by Suse covering 5 versions with 302 tracked vulnerabilities including 6 critical and 2 high-severity issues and 11 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Linux Enterprise Software Development Kit vulnerabilities, Linux Enterprise Software Development Kit security, Linux Enterprise Software Development Kit CVE, Suse Linux Enterprise Software Development Kit, Linux Enterprise Software Development Kit threat intelligence, Suse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Linux Enterprise Software Development Kit KEV, Linux Enterprise Software Development Kit exploited vulnerabilities",{"@context":170,"@type":171,"name":172,"description":167,"url":173,"manufacturer":174,"applicationCategory":178,"softwareVersion":179,"mainEntity":180},"https:\u002F\u002Fschema.org","SoftwareApplication","Linux Enterprise Software Development Kit","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsuse\u002Flinux_enterprise_software_development_kit",{"@type":175,"name":176,"url":177},"Organization","Suse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsuse","Security Software","5 versions tracked",{"@type":181,"name":182,"description":183,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Linux Enterprise Software Development Kit Security Vulnerabilities","Security vulnerabilities affecting Linux Enterprise Software Development Kit by Suse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":185,"apiVersion":186},"2026-10-16T23:10:51.322Z","3.0",[],{"rows":189,"total":11,"capped":25,"failed":24},[190,196,201,206,211,215,220,224,228,232,236],{"cveId":91,"name":103,"severity":46,"cvss":44,"added":104,"epss":94,"published":191,"ranges":192,"checked":4,"hits":195,"covers":25},"2016-04-21T11:00:21.667",[193,194],"11-sp4","12-sp1",[],{"cveId":108,"name":113,"severity":72,"cvss":111,"added":114,"epss":112,"published":197,"ranges":198,"checked":4,"hits":200,"covers":25},"2015-08-08T00:59:04.597",[199,193,27],"11-sp3",[],{"cveId":75,"name":117,"severity":46,"cvss":44,"added":118,"epss":78,"published":202,"ranges":203,"checked":4,"hits":205,"covers":25},"2013-06-18T22:55:02.807",[204,199],"11-sp2",[],{"cveId":121,"name":125,"severity":72,"cvss":111,"added":118,"epss":124,"published":207,"ranges":208,"checked":4,"hits":210,"covers":25},"2013-06-26T03:19:10.793",[209,199],"10-sp4",[],{"cveId":49,"name":128,"severity":46,"cvss":44,"added":129,"epss":52,"published":212,"ranges":213,"checked":4,"hits":214,"covers":25},"2012-05-11T10:15:48.043",[209,204],[],{"cveId":80,"name":132,"severity":46,"cvss":44,"added":133,"epss":83,"published":216,"ranges":217,"checked":4,"hits":219,"covers":25},"2012-06-07T22:55:17.883",[218,204],"11-sp1",[],{"cveId":136,"name":142,"severity":140,"cvss":139,"added":133,"epss":141,"published":221,"ranges":222,"checked":4,"hits":223,"covers":25},"2015-10-22T00:00:03.093",[199,193,27,194],[],{"cveId":54,"name":145,"severity":46,"cvss":44,"added":146,"epss":57,"published":225,"ranges":226,"checked":4,"hits":227,"covers":25},"2014-09-25T01:55:04.367",[199,27],[],{"cveId":41,"name":145,"severity":46,"cvss":44,"added":146,"epss":47,"published":229,"ranges":230,"checked":4,"hits":231,"covers":25},"2014-09-24T18:48:04.477",[199,27],[],{"cveId":151,"name":156,"severity":140,"cvss":154,"added":157,"epss":155,"published":233,"ranges":234,"checked":4,"hits":235,"covers":25},"2016-05-05T18:59:04.727",[193,27,194],[],{"cveId":160,"name":163,"severity":140,"cvss":154,"added":157,"epss":162,"published":237,"ranges":238,"checked":4,"hits":239,"covers":25},"2016-05-05T18:59:08.96",[193,27,194],[]]